Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
File:                     4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft (raw, json)
Hash identifier:          nldTe9pWB1KTJPKzdCCgMlIm+SVsbidUMxQwvi6yMdU=
Subject key identifier:   A2:BF:9A:73:EF:55:D0:15:30:CA:26:32:FA:AF:81:AD:17:DC:E2:68
Authority key identifier: 4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26
Certificate issuer:       /CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526
Certificate serial:       4D9B3DE895E834216C1EC44798F73C04D8EE2A2E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
Manifest number:          2B
Signing time:             Wed 03 Jun 2026 00:05:00 +0000
Manifest this update:     Wed 03 Jun 2026 00:00:00 +0000
Manifest next update:     Thu 04 Jun 2026 02:11:00 +0000
Files and hashes:         1: 4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl (hash: T69EVKxZ8sYlxLRTiDEs7voqSewdH8VJdJeUC0EOQTo=)
                          2: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: crz5wQlV27LIwISEyXo4hYXR+StXchnW3rusJFfd1fY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl
                          rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9b:3d:e8:95:e8:34:21:6c:1e:c4:47:98:f7:3c:04:d8:ee:2a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526
        Validity
            Not Before: Jun  3 00:00:00 2026 GMT
            Not After : Jun  4 02:11:00 2026 GMT
        Subject: CN=A2BF9A73EF55D01530CA2632FAAF81AD17DCE268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:59:96:a9:e3:7b:cc:70:f9:da:0a:38:b1:
                    09:1a:76:4a:63:8b:d6:66:f7:6a:0e:d2:87:91:36:
                    61:e2:7f:24:21:32:4f:f7:59:85:07:4b:17:02:41:
                    2d:13:d6:51:07:2c:02:53:dc:7f:3d:83:4f:75:52:
                    1d:b5:ae:0c:f7:ba:b5:43:a6:0e:17:91:7e:49:47:
                    d3:ae:0a:a7:77:5f:70:54:b5:9c:a4:b8:d7:7c:e3:
                    28:1b:b8:1b:71:0d:56:7e:19:a3:7e:b6:b6:24:57:
                    90:f1:33:d2:fd:60:d0:4b:6b:67:e9:aa:7f:3e:71:
                    5e:c4:fe:d0:23:a8:f4:8f:9c:c9:7f:a6:2d:74:db:
                    0d:37:ee:75:b1:8c:ca:87:f0:4c:22:1f:23:b9:a3:
                    20:05:e1:36:29:51:41:06:00:75:a7:ac:e0:ad:2e:
                    2d:d8:28:5e:28:5f:5e:90:aa:10:47:f1:4b:86:92:
                    80:61:4e:34:a4:cd:3c:21:2f:53:fe:90:55:da:9b:
                    e6:7d:5f:ae:c9:d6:c8:ac:56:22:64:53:8d:db:f9:
                    40:0b:18:7f:69:9e:29:c0:6e:76:98:69:af:40:ea:
                    66:d0:09:21:74:da:94:3d:16:5d:a4:72:35:0b:76:
                    d5:01:0e:d0:48:bb:26:49:a3:ea:81:75:ec:b3:7e:
                    52:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BF:9A:73:EF:55:D0:15:30:CA:26:32:FA:AF:81:AD:17:DC:E2:68
            X509v3 Authority Key Identifier:
                keyid:4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fe:7f:ee:dc:87:ad:ff:27:75:c5:9b:23:02:ef:6b:5a:e2:
         1f:9f:03:1f:20:c8:71:ba:9c:cd:e4:20:3a:97:40:76:ef:56:
         c5:fa:4f:45:1f:37:71:68:46:dc:87:67:3b:75:e0:c0:59:4b:
         67:e7:2d:5b:35:c0:66:80:99:bd:3a:06:69:dc:91:25:75:3e:
         88:d0:19:83:4f:ad:e9:d8:0a:89:a9:e2:e5:90:12:0e:6a:50:
         d3:d9:8d:a1:e6:d1:f9:47:c1:8c:88:06:1b:6a:13:6b:09:68:
         ec:f2:8f:cf:f9:5d:13:24:c0:c2:fd:8a:c2:02:ac:13:bc:cd:
         7f:02:c7:61:29:8a:d6:e4:ec:79:00:da:89:64:0c:91:07:6f:
         61:b1:08:42:20:07:69:42:37:dd:f5:83:00:37:3e:f3:09:3f:
         c9:f8:dd:17:31:92:02:98:22:be:5b:6e:83:b6:0b:25:f3:45:
         6a:ff:2f:94:e6:b5:2a:db:ba:4a:ad:18:84:57:1b:fc:28:e9:
         08:db:7e:19:2d:95:54:c5:5f:a0:01:8a:43:4d:fb:ca:41:22:
         d0:14:50:d5:2e:52:2b:af:68:eb:0c:55:b7:b5:1a:3c:4d:03:
         22:0a:e5:2e:7a:cf:de:96:3e:b6:1b:6a:23:73:a7:6e:85:d8:
         c4:b8:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:42:47 2026 by rpki-client